CVE-2013-2372: XSS
Cross-site scripting (XSS) vulnerability in the Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2372?
CVE-2013-2372 has been classified as a medium severity cross-site scripting vulnerability.
How do I fix CVE-2013-2372?
To fix CVE-2013-2372, upgrade TIBCO Spotfire Web Player to version 3.3.3, 4.0.3, 4.5.1, or 5.0.1 or later.
What versions are affected by CVE-2013-2372?
CVE-2013-2372 affects TIBCO Spotfire Web Player versions 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1.
What type of vulnerability is CVE-2013-2372?
CVE-2013-2372 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web script or HTML.
Who is impacted by CVE-2013-2372?
Any organization using vulnerable versions of TIBCO Spotfire Web Player is at risk due to CVE-2013-2372.